CVE-2024-45203

CVE-2024-45203 concerns the @cosme App (Android before 5.69.0; iOS before 6.74.0) where the custom URL scheme handler improperly authorizes, allowing an attacker to direct a user to an arbitrary website and potentially phish. The root cause is inadequate restriction of the URL scheme handler, ena...